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(54) LOG-IN CONTROL SYSTEM 
(57)Abstract: 

PURPOSE: To enable log-in only for a specified user decided by the 
security level among the plural users to use the same user ID and 
further to extremely improve an effect for preventing the illegal log- 
in to a system. 

CONSTITUTION: When a log- in request with the input of the user 
ID is applied from a terminal 2 to a computer system 3, 
corresponding to the user ID, passwords to be paired with 
respective keywords contained in a certain number of paired 
keywords/passwords corresponding to the security level shown by a 
security level set part 32 are successively inputted among the plural 
pairs of keywords/passwords registered on a keyword/password 
table 32 of a registration file 31, and a user judgement part 37 
judges it by comparing and collating the passwords whether the user 
is legal or not. 
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Pertinent Description ( [0016] - [0027] ) 
[0016] 

Next, the operations according to the configuration in Fig. 
1 are explained with respect to (1) when a keyword/password-pair 
registration request is made, and (2) when a login request is made. 
Fig. 2 through Fig. 4 are referenced where appropriate. 

[0017] 

Operations at the time of (1) when the keyword/password-pair 
registration request is made : 

A specific user who is able to register a keyword /pas sword 
pair (i.e. , a administrator) uses a terminal 1 to perform specific 
procedures (the content of these procedures is irrelevant to the 
present invention and thus explanation thereof is omitted) , so as 



1 



to put a computer system 3 into a keyword/password-pair registration 
mode. Here, the user operates the terminal 1 to designate a user 
ID, and then sequentially inputs multiple keyword and password pairs 
for that user ID. 
[0018] 

A keyword/password pair registration unit 35 inside the 
computer system 3 registers , in correspondence with the designated 
ID, the keyword/password pair that was inputted from the terminal 
1, into a keyword registration field 33 and a password registration 
field 34 in a keyword/password pair table 32 which has been prepared 
in a registration file 31. 

[0019] 

Accordingly, in a case where "ocean" for example is designated 
as the user ID and "project"/ "language" , ''season" /"summer" ... 

for example are sequentially inputted as the keyword/password pair 
for this user ID, the keyword/password table 32 such as shown in 
Fig. 2 will be prepared in the registration file 31. 

[0020] 

(2) Operations at the time of the login request: 
When a user (who is not necessarily the same as the user at 
the time when the registration of the keyword/password pair was 
performed) wants to use the computer system 3, a terminal 2 is used 
to perform a login request to the computer system 3 along with 
inputting the user ID. Here, it is assumed that "ocean" has been 
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inputted as the user ID, as shown in Fig. 3. 
[0021] 

When the login has been requested using the terminal 2, a user 
determination unit 37 in the computer system 3 is loaded. When this 
occurs, a value represented by a comparison counter n (not shown 
in the diagram) , which is a software counter for counting the number 
of times that a comparison has been made, is cleared to "0" by the 
user determination unit 37 (step SI) . Then, the user determination 
unit 37 randomly retrieves one registration keyword from the ( keyword 
registration field 33 of the) keyword/password table 32 shown in 
Fig . 2 which has been created in the registration f lie 3 1 corresponding 
to the user ID "ocean" (which was inputted by operations from the 
terminal 2) of the user who performed the login request, and by 
displaying this on the terminal 2, the user is prompted to input 
the keyword and its corresponding password (step S2). Here, the 
keyword "season" has been retrieved as shown in Fig. 3 and this 
is displayed on the terminal 2. 

[0022] 

When the keyword is displayed on the terminal 2 , the user inputs 
the password which corresponds to that keyword using the terminal 
2. Here, since "season" is being displayed as the keyword, a 
legitimate user would input "summer", which corresponds to "season", 
as the password (see Fig. 3). 

[0023] 
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At the user determination unit 37, the password inputted from 
the terminal 2 corresponding to the keyword display is inputted 
(step S3) , and a comparison is made between this inputted password 
and the password that is registered in the password registration 
field 34 in the keyword/password table 32 for the displayed keyword 
(step S4) . If both passwords do not match each other, then the user 
determination unit 37 assumes that the login request is from an 
illegitimate user, and thus it does not grant permission to log 
in. 

[0024] 

On the other hand, in a case where it is determined that both 
passwords do match each other as a result of the comparison at step 
S4, the user determination unit 37 causes the comparison counter 
n to increase by 1 (step S5). Then the user determination unit 37 
determines whether or not this value which is produced after being 
increased by 1 (here, this is "1") equals a security level that 
has been set in a security level configuration unit 36 (step S6). 
Now, assuming that the security level of the computer system 3 is 
"2" , the determination rendered at step S6 will be NO. In this case, 
the user determination unit 37 returns to step S2 and randomly 
retrieves one registration keyword (excluding the keyword that was 
just retrieved previously) from the (keyword registration field 
33 of the) keyword/password table 32, and then displays this on 
the terminal 2 . Here, "project" is retrieved as the second keyword. 
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as shown in Fig. 3, and then this is displayed on terminal 2. 
[0025] 

When the second keyword is displayed on the terminal 2, the 
user uses the terminal 2 to input the password which corresponds 
to that keyword, just as with the first keyword. In the current 
example "project" is being displayed as the keyword. Thus, the 
legitimate user would input "language", which is paired with 
"project", as the password (see Fig. 3). 

[0026] 

At the user determination unit 37, the password inputted from 
the terminal 2 is inputted ( step S3 ) , and then the user determination 
unit 37 compares this inputted password with the password that is 
registered in the keyword/password table 32 for the displayed keyword 
(step S4). If both passwords do match each other, then the user 
determination unit 37 causes the comparison counter n to increase 
by 1 (step S5). Then, the user determination unit 37 determines 
whether or not the value of n after being increased by 1 (which 
is "2" here) matches the security level (which is "2" here) indicated 
in the security level configuration unit 36 (step S6). If these 
do match each other, as in this example, then the user determination 
unit 37 assumes that the number of passwords indicated by the security 
level were inputted sequentially and corresponding correctly to 
the randomly retrieved registration keywords, and that therefore 
the login request was from a legitimate user for that security level. 
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Thus , the user determination unit 37 allows the login to the computer 
system 3. 

[0027] 

Note that in the embodiment mentioned above, explanations were 
given with respect to the case where the number of passwords which 
need to be inputted is directly indicated by the security level 
set in the security level configuration unit 36 . However, the present 
invention is not restricted to this embodiment. A configuration 
may also be used such that the number of passwords which must be 
entered increases as the security level becomes higher. 
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